CVE-2023-1485: SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting

Published Mar 18, 2023

Updated

A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371.

Affected Software

1 affected component

Young Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System=1.0

Event History

Mar 18, 2023

CVE Published

08:31 PM

Data Sourced

08:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1485?

CVE-2023-1485 is classified as a problematic vulnerability.

How do I fix CVE-2023-1485?

To fix CVE-2023-1485, it is recommended to sanitize and validate user input in the GET parameter handler.

What component is affected by CVE-2023-1485?

CVE-2023-1485 affects the GET Parameter Handler in the SourceCodester Young Entrepreneur E-Negosyo System version 1.0.

What type of vulnerability is CVE-2023-1485?

CVE-2023-1485 is an XSS (Cross-Site Scripting) vulnerability.

Which version of the Young Entrepreneur E-Negosyo System is impacted by CVE-2023-1485?

CVE-2023-1485 impacts version 1.0 of the Young Entrepreneur E-Negosyo System.